The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs users to install the belt-sh/cli and additional skills from the inference-sh organization using npx skills add. It also references an installation script located at https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md for the CLI tool.
[INDIRECT_PROMPT_INJECTION]: The skill incorporates tools like tavily/search-assistant and exa/answer that retrieve data from external web sources. This creates a surface where the agent could potentially ingest and act upon malicious instructions hidden within web content.
Ingestion points: Search result data fetched via belt app run commands in SKILL.md.
Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the provided snippets.
Capability inventory: The skill is authorized to use the belt CLI tool for Bash execution, AI model invocation, and web searches.
Sanitization: There is no evidence of filtering or validation for the content returned by the search tools.

landing-page-design